This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json) Hash identifier: 537atv9lQVZlUpHzPMfjQruGteLUJbmr1pmuYzdFKyA= Subject key identifier: EF:23:A0:5B:3C:85:EA:49:3F:C8:93:2A:3A:24:13:01:45:38:91:F9 Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft Manifest number: 063B Signing time: Sat 20 Dec 2025 22:01:49 +0000 Manifest this update: Sat 20 Dec 2025 22:01:49 +0000 Manifest next update: Sat 27 Dec 2025 22:01:49 +0000 Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: JFFrDze8TWTGvqSj7eSk/2w+p/Q+ypjYTfe2WBUEkeQ=) 2: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: DsgHJydaVuiP2/JOiaGz7+8hzbblvMVmJcBWMtJLoOw=) 3: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: 0H9iVWOcGuVvN/MVa3XeV+I+PG+LvrsVTNSfk98zbHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Validity Not Before: Dec 20 22:01:49 2025 GMT Not After : Dec 27 22:01:49 2025 GMT Subject: CN=69471ccd-331b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:6e:56:67:07:9d:78:63:50:cd:97:46:eb: 3b:1c:26:e3:44:6d:00:f8:7a:a4:48:d3:f8:7a:84: 34:4c:46:97:93:29:58:74:ca:fa:fd:c1:d0:94:93: 42:b0:35:fb:1c:78:45:0d:1f:0d:7b:b8:48:30:45: 78:92:ca:39:34:c8:d9:3d:70:05:46:04:13:49:1d: 5d:1d:be:e0:54:4a:15:09:d4:82:3e:bc:63:97:9d: ae:5a:22:e0:f4:93:f8:73:36:b6:1d:38:36:23:b1: e5:e5:fe:29:fb:cd:53:a6:78:e1:87:05:e4:a1:f6: 3d:1c:85:2c:5e:e8:9c:8d:d7:e1:ca:d5:28:ab:4d: 9f:8f:6d:70:fd:42:1d:fa:88:f2:12:b1:d6:25:37: af:e6:99:1f:b4:35:32:00:68:6b:20:7b:12:f0:37: 13:de:a0:8e:ea:8b:57:fe:d2:5f:cb:76:eb:e0:e8: 32:01:59:93:5b:61:79:a3:22:9d:2a:ac:36:39:7c: 96:ed:9d:ee:cf:e4:7f:62:f4:61:b3:72:a8:ce:7b: b1:c8:41:8e:9e:98:aa:10:d4:90:c0:83:9b:d0:37: 90:06:12:bb:fd:4d:9d:0e:74:38:f6:36:a1:58:71: b2:41:0d:f5:47:04:3a:14:96:fe:0c:24:34:df:0f: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:23:A0:5B:3C:85:EA:49:3F:C8:93:2A:3A:24:13:01:45:38:91:F9 X509v3 Authority Key Identifier: keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5c:5c:07:4d:7b:0c:b4:de:3c:a4:b6:ef:49:a9:10:22:ab: fd:63:22:d4:dd:75:29:f0:7d:2a:a6:8a:6e:d4:5f:56:0f:d2: cd:6e:b4:e1:86:26:85:b9:a5:e1:4e:c8:e4:88:54:c9:4b:93: c8:70:f3:0e:89:8f:22:48:33:00:35:c9:29:b7:f1:e5:af:46: c1:73:68:8f:d7:ce:47:42:52:2d:1c:b0:77:03:00:e6:fa:15: 2b:2f:7d:c0:f8:e8:8b:fd:f6:b6:ff:74:0a:bb:72:b7:f4:42: 56:bd:52:2d:91:7b:a8:91:29:4c:2d:29:e8:dd:5c:da:94:75: 4c:36:fe:05:13:66:8c:57:3a:17:96:a1:34:9b:cc:67:45:3a: bb:ab:19:17:1b:1c:8e:6a:b2:99:b5:a7:92:e2:07:ca:4a:f0: f5:c6:ee:8f:58:b8:7e:26:d2:9f:08:e8:77:14:49:73:56:ab: 11:50:8b:91:b0:d7:bb:64:ce:a1:75:30:8e:f2:37:15:09:4b: 6c:4b:2e:44:20:40:8f:da:cd:28:de:7c:d8:24:9e:e9:97:70: e3:13:a7:37:a0:3a:8f:64:d0:5d:61:99:86:0e:ef:33:52:1a: e7:ea:aa:d8:84:3b:17:2e:ff:30:ef:11:7f:72:ab:25:1b:06: 5e:72:0e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOTUxMTAvBgNVBAUTKEI0OEU0MDczQjgxMEJDRjlDNzk0ODE5QzgwRkRFNzFE NTNGMkRFMkMwHhcNMjUxMjIwMjIwMTQ5WhcNMjUxMjI3MjIwMTQ5WjAYMRYwFAYD VQQDDA02OTQ3MWNjZC0zMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUBuVmcHnXhjUM2XRus7HCbjRG0A+HqkSNP4eoQ0TEaXkylYdMr6/cHQlJNC sDX7HHhFDR8Ne7hIMEV4kso5NMjZPXAFRgQTSR1dHb7gVEoVCdSCPrxjl52uWiLg 9JP4cza2HTg2I7Hl5f4p+81TpnjhhwXkofY9HIUsXuicjdfhytUoq02fj21w/UId +ojyErHWJTev5pkftDUyAGhrIHsS8DcT3qCO6otX/tJfy3br4OgyAVmTW2F5oyKd Kqw2OXyW7Z3uz+R/YvRhs3KoznuxyEGOnpiqENSQwIOb0DeQBhK7/U2dDnQ49jah WHGyQQ31RwQ6FJb+DCQ03w+yWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8joFs8 hepJP8iTKjokEwFFOJH5MB8GA1UdIwQYMBaAFLSOQHO4ELz5x5SBnID95x1T8t4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5NS9ERTJGRjFGNEJB QzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQbkhsSUdjZ1AzbkhWUHkz aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJNUFjN2dRdlBuSGxJR2NnUDNuSFZQeTNpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5NS9ERTJGRjFGNEJBQzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQ bkhsSUdjZ1AzbkhWUHkzaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfXFwHTXsMtN48pLbvSakQIqv9YyLU3XUp8H0qpopu1F9WD9LNbrTh hiaFuaXhTsjkiFTJS5PIcPMOiY8iSDMANckpt/Hlr0bBc2iP185HQlItHLB3AwDm +hUrL33A+OiL/fa2/3QKu3K39EJWvVItkXuokSlMLSno3VzalHVMNv4FE2aMVzoX lqE0m8xnRTq7qxkXGxyOarKZtaeS4gfKSvD1xu6PWLh+JtKfCOh3FElzVqsRUIuR sNe7ZM6hdTCO8jcVCUtsSy5EIECP2s0o3nzYJJ7pl3DjE6c3oDqPZNBdYZmGDu8z Uhrn6qrYhDsXLv8w7xF/cqslGwZecg47 -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:51 2025 by rpki-client